Based on my experience as the phishing expert in the ClamAV team I wrote a small article about phishing detection.